The spoolfile management tool we use - ESPUL - will allow this function.
We can assign OP-like capability to ESPUL users without directly assigning
MPE OP capability, and this allows them access to all spoolfiles on the
system.  Additionally, we restrict ESPUL purge commands to these users in
production only to avoid accidental purges of spoolfiles not their own.

I don't know if other spooler management packages such as NBSpool allow
this.

Lee Gunter          [log in to unmask]
Regence BlueCross BlueShield of Oregon / Regence HMO Oregon
==========================================================
The opinions expressed, here, are mine and mine alone.



From: "Simpkins, Terry" <[log in to unmask]> on 11/19/98 07:59
      AM

Please respond to "Simpkins, Terry" <[log in to unmask]>


To:   [log in to unmask]
cc:    (bcc: Lee Gunter/BCBSO/TBG)
Subject:  spool file security




We have a need for users to be able to download spool files (they are not
the creator of)
to their PC.  When this was one or two users, we just gave them OP
capability and that
solved the problem.  Now this number of users is growing and the "brute
force" solution
is getting more undesireable.

The spoolfiles are generally created in batch jobs, and having the user be
the creator
isn't an easy option.  Also, there are numerous times when several users
need to
download the same spoolfile.  Thismeans that even if we could have the user
be the
creator somehow, we haven't solved the problem.

Any ideas on how to allow this, short of copying the spoolfiles to another
GROUP.ACCOUNT
and allowing read access to that GROUP.ACCOUNT?

*******************************
Terry W. Simpkins
Director ISIT
Lucas Control Systems
[log in to unmask]
*******************************